Set recommended level for process.args_count

mjwolf · Jul 22, 2024 · 0448dfb · 0448dfb
1 parent 927619e
commit 0448dfb
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/docs/attributes-registry/tls.md b/docs/attributes-registry/tls.md
@@ -6,8 +6,8 @@
 
 # TLS
 
-- [Tls](#tls-attributes)
-- [Tls Deprecated](#tls-deprecated-attributes)
+- [TLS Attributes](#tls-attributes)
+- [TLS Deprecated Attributes](#tls-deprecated-attributes)
 
 ## TLS Attributes
 

diff --git a/model/registry/process.yaml b/model/registry/process.yaml
@@ -94,6 +94,8 @@ groups:
           This field can be useful for querying or performing bucket analysis on how many
           arguments were provided to start a process. More arguments may be an indication
           of suspicious activity.
+        requirement_level:
+          recommended: if `process.command_args` is populated.
         examples: [4]
       - id: owner
         type: string